[KongchangAI]
Unverified50% confidenceOpinionExact time

Filippo Valsorda's calculations show that even allowing any timestamp in the 1997–98 window and the first 16 prime-order candidates per curve, there is barely 30 bits of freedom, insufficient to deliberately target a hypothetical small class of weak curves or embed a NOBUS backdoor.

1
Sources
50%
Confidence
Long-term
Relevance
10/18/2026
First Seen

Sources

Related Entities

Related Claims

Cite This Claim

Stable URI
https://kongchang.com/claim/1061277
API
curl https://kongchang.com/api/v1/knowledge/claims/1061277
MCP
get_claim(id=1061277)